CVE-2019-17091

faces/context/PartialViewContextImpl.java in Eclipse Mojarra, as used in Mojarra for Eclipse EE4J before 2.3.10 and Mojarra JavaServer Faces before 2.2.20…

published October 2, 2019

CVSS
—
EPSS
2%
Percentile
84.4
In the wild
Unconfirmed
What it is

faces/context/PartialViewContextImpl.java in Eclipse Mojarra, as used in Mojarra for Eclipse EE4J before 2.3.10 and Mojarra JavaServer Faces before 2.2.20, allows Reflected XSS because a client window field is mishandled.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02469 · 84.4th percentile
Published
2019-10-02T13:58Z
EPSS history
Timeline
  • 02 OCT 13:58Z
    faces/context/PartialViewContextImpl.java in Eclipse Mojarra, as used in Mojarra for Eclipse EE4J before 2.3.10 and Mojarra JavaServer Faces before 2.2.20…
    cvelistv5